Earn the coveted Fabric Analytics Engineer certification. 100% off your exam for a limited time only!
The snowflake connector only works when I use my default role in the "Specify a text value to use as Role name" option. If I use a role that is not my default role (set in snowflake) it does not allow me to connect to the data. Power BI throws an error "We couldn't authenticate with the credentials provided."
I am using the SSO/Microsoft Account option to authenticate to Snowflake.
It works when I use my default role.
How can I get it to work when I use a different role that I have access to in Snowflake?
Solved! Go to Solution.
Hey I fixed this in my account - in Snowflake within the Security Integration you need to enable EXTERNAL_OAUTH_ANY_ROLE_MODE.
ALTER SECURITY INTEGRATION {} SET EXTERNAL_OAUTH_ANY_ROLE_MODE = ENABLE;
This bug is still present.
If I set my default role to PUBLIC, I can log into Power BI using AAD either leaving the 'Specify a text value to use as Role name (optional)' empty, or entering the value PUBLIC. If I enter any other value, I get a connection error.
If I set my default role to USR_ROLE_DATA_ENGINEER, I can log into Power BI using AAD either leaving the 'Specify a text value to use as Role name (optional)' empty, or entering the value USR_ROLE_DATA_ENGINEER. If I enter any other value (including PUBLIC), I get a connection error.
Hey I fixed this in my account - in Snowflake within the Security Integration you need to enable EXTERNAL_OAUTH_ANY_ROLE_MODE.
ALTER SECURITY INTEGRATION {} SET EXTERNAL_OAUTH_ANY_ROLE_MODE = ENABLE;
Confirmed this morning. This works.
Thank you!
We have also seen this as a problem. After creating the security integration we are able to create the connection but we are only able to connect with the default role. Using another role gives an authentication error.
Hi @Anonymous ,
See: Using SSO Between Power BI and Snowflake
If you connect using the Microsoft Account option, an in-app browser window will open redirecting you to authenticate using your AAD tenant.
To achieve the experience described above, you need to perform a one-time setup in Snowflake. Log in as an ACCOUNTADMIN in your Snowflake account, and create the security integration described in this doc. Ensure that the Power BI user exists in Snowflake and that it also matches the user in AAD. You can set up user-matching rules in multiple ways through security integration settings, but the most common way is to use the UPN value in AAD to match with the login_name of the Snowflake user.
You can also refer the error messages workarounds from Snowflake document: Power BI SSO to Snowflake
Best Regards,
Community Support Team _ Yingjie Li
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Yeah, we have created the Security Integration and it works. The only thing that does not work is the "Role" in the Connection options when I put in a Role that is not my default role in Snowflake.
User | Count |
---|---|
125 | |
106 | |
99 | |
63 | |
62 |
User | Count |
---|---|
135 | |
116 | |
101 | |
71 | |
61 |